← CVE Intelligence

CVE-2023-45596

AiLux / imx6 bundle PUBLISHED

Description (CNA)

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

Affected (CNA)

Vendor / productVersions
AiLux / imx6 bundleaffected 0 before 1.0.7-2

CWE

CWE-425

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.